# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=767 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 768 --- ## [Msearch c фильтрацией по индексу](https://discuss.elastic.co/t/msearch-c/289753)
**Author:** [@One\_Two](https://discuss.elastic.co/u/One_Two)\ **Replies:** 4\ **Last updated:** [November 30, 2021, 5:15am UTC](https://discuss.elastic.co/t/msearch-c/289753 "2021-11-30T05:15:03Z")
Здравствуйте. Помогите пожалуйста составить запрос для поиска по нескольким индексам и данные дополнительно отфильтровать с разными фильтрами для каждого индекса. Сейчас у меня фильтрация происходит по всем индексам один… --- ## [The index shard is lost, and the cluster status is green](https://discuss.elastic.co/t/the-index-shard-is-lost-and-the-cluster-status-is-green/290332)
**Author:** [@zekaifeng](https://discuss.elastic.co/u/zekaifeng)\ **Replies:** 4\ **Last updated:** [November 30, 2021, 1:57am UTC](https://discuss.elastic.co/t/the-index-shard-is-lost-and-the-cluster-status-is-green/290332 "2021-11-30T01:57:05Z")
Elasticsearchversion (bin/Elasticsearch --version): Version: 7.3.1 Plugins installed: JVM version (java -version): jdk 8 OS version : Linux Description of the problem including expected versus actual behavior: The … --- ## [How to link current filter user used in controls with markdown?](https://discuss.elastic.co/t/how-to-link-current-filter-user-used-in-controls-with-markdown/290385)
**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\ **Replies:** 2\ **Last updated:** [November 30, 2021, 1:46am UTC](https://discuss.elastic.co/t/how-to-link-current-filter-user-used-in-controls-with-markdown/290385 "2021-11-30T01:46:37Z")
Hi folks, I am using controls in kibana so that user could get a drop-down and select filter he/she wants. What I am trying to achieve is to create the main dashboard and have markdowns to sub dashboards. But the issue … --- ## [Row Renderers, not rendering?](https://discuss.elastic.co/t/row-renderers-not-rendering/290092)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 2\ **Last updated:** [November 29, 2021, 9:48pm UTC](https://discuss.elastic.co/t/row-renderers-not-rendering/290092 "2021-11-29T21:48:49Z")
Hello, We have some Firewall data, that when viewed in the timeline, I'd expect the Flow row renderer to pick up and "beautify". I've attached a portion of the data for an example. Can someone explain why this would no… --- ## [Self hosted elasticsearch on AWS ec2 server](https://discuss.elastic.co/t/self-hosted-elasticsearch-on-aws-ec2-server/290483)
**Author:** [@bbangerter](https://discuss.elastic.co/u/bbangerter)\ **Replies:** 4\ **Last updated:** [November 29, 2021, 8:39pm UTC](https://discuss.elastic.co/t/self-hosted-elasticsearch-on-aws-ec2-server/290483 "2021-11-29T20:39:46Z")
I'm new to Elasticsearch, and I'm trying to install and run Elasticsearch on a CentOS 8 server in AWS. Currently it is a small server (1GB memory, 15GB SSD, 1 CPU) I have installed the software, but when trying to run t… --- ## [Using ElasticSearch as a Microservice](https://discuss.elastic.co/t/using-elasticsearch-as-a-microservice/290354)
**Author:** [@Mohan\_Radhakrishnan](https://discuss.elastic.co/u/Mohan_Radhakrishnan)\ **Replies:** 3\ **Last updated:** [November 29, 2021, 8:18pm UTC](https://discuss.elastic.co/t/using-elasticsearch-as-a-microservice/290354 "2021-11-29T20:18:23Z")
Hello, This is a design question. We have messages pushed to Kafka and Kafka can pipe it to Elastic using Kafka connect. This is what I am considering for message search. Kafka can send these messages but it also forwa… --- ## [Elastic SIEM. Security rules doesn't work](https://discuss.elastic.co/t/elastic-siem-security-rules-doesnt-work/290094)
**Author:** [@Dmitriy\_Esin](https://discuss.elastic.co/u/Dmitriy_Esin)\ **Replies:** 11\ **Last updated:** [November 29, 2021, 7:58pm UTC](https://discuss.elastic.co/t/elastic-siem-security-rules-doesnt-work/290094 "2021-11-29T19:58:38Z")
Hi all! I have an issue with the Elastic Security Rules. I've installed the elastic agents on my target instances: I can successfully see its data streams: I've created default enrolment policy for my agents: … --- ## [Query MultMatch with fuzzines in 7.6](https://discuss.elastic.co/t/query-multmatch-with-fuzzines-in-7-6/290486)
**Author:** [@RafaelPeggau](https://discuss.elastic.co/u/RafaelPeggau)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 7:43pm UTC](https://discuss.elastic.co/t/query-multmatch-with-fuzzines-in-7-6/290486 "2021-11-29T19:43:32Z")
Estou tentando construir uma consulta, onde pesquiso sobre vários campos (fields), usando minimun should match, e fuzzines, como no exemplo. "size": 10000, "query": { "bool": { … --- ## [Trying to extract Lucene from Kibana](https://discuss.elastic.co/t/trying-to-extract-lucene-from-kibana/290382)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 5\ **Last updated:** [November 29, 2021, 7:42pm UTC](https://discuss.elastic.co/t/trying-to-extract-lucene-from-kibana/290382 "2021-11-29T19:42:17Z")
Dear all =) When I write KQL in the search bar, while having Google Chrome debugging open, I see a request to bsearch is made with a cryptic response such as eJxEjl1rgzAUhv9Lrr2oijdCb8Za2MB0pnGFj ... == I suppose the… --- ## [Plans for KQL support in Kibana Stack Alert "Elasticsearch query"?](https://discuss.elastic.co/t/plans-for-kql-support-in-kibana-stack-alert-elasticsearch-query/290381)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 2\ **Last updated:** [November 29, 2021, 7:35pm UTC](https://discuss.elastic.co/t/plans-for-kql-support-in-kibana-stack-alert-elasticsearch-query/290381 "2021-11-29T19:35:59Z")
Dear all =) When using Kibana Stack Alert "Elasticsearch query", it is only possible to provide Lucene. Are there any plans to support KQL, so it would just convert it to Lucene? It would be very useful since there is … --- ## [Up-Sizing Resources with Helm Chart / Kubernetes](https://discuss.elastic.co/t/up-sizing-resources-with-helm-chart-kubernetes/290481)
**Author:** [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 7:04pm UTC](https://discuss.elastic.co/t/up-sizing-resources-with-helm-chart-kubernetes/290481 "2021-11-29T19:04:15Z")
I have a 3-node ES cluster which was spun up with the Elasticsearch Helm chart ( helm-charts/README.md at main · elastic/helm-charts · GitHub ). I want to bump up the heap/CPU/memory allocations, so I've created a new, … --- ## [Tracking number of value changes of boolean field in time series](https://discuss.elastic.co/t/tracking-number-of-value-changes-of-boolean-field-in-time-series/290425)
**Author:** [@DennisKlopfer](https://discuss.elastic.co/u/DennisKlopfer)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 6:31pm UTC](https://discuss.elastic.co/t/tracking-number-of-value-changes-of-boolean-field-in-time-series/290425 "2021-11-29T18:31:05Z")
My time series data contains a boolean field, which changes frequently. I want to count the number of changes of said field. Optimally I would like to create a field containing this number while ingesting, but showing t… --- ## [Elasticsearch is running but not showing in ElasticHead](https://discuss.elastic.co/t/elasticsearch-is-running-but-not-showing-in-elastichead/290377)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 5\ **Last updated:** [November 29, 2021, 5:46pm UTC](https://discuss.elastic.co/t/elasticsearch-is-running-but-not-showing-in-elastichead/290377 "2021-11-29T17:46:40Z")
Hi, I checked the status of Elasticsearch and everything indicates that it is running. However, when I try to connect to elastichead or even look up the ip:port, it does not connect. Is this some sort of port issue? My E… --- ## [Clastic cluster unstable](https://discuss.elastic.co/t/clastic-cluster-unstable/290475)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 5:45pm UTC](https://discuss.elastic.co/t/clastic-cluster-unstable/290475 "2021-11-29T17:45:58Z")
I have ELB stack running in kubernetes. But noticed issue with two out of 3 nodes with following error {"type": "server", "timestamp": "2021-11-29T17:42:37,326Z", "level": "WARN", "component": "o.e.c.c.ClusterFormationF… --- ## [Different size\_in\_bytes for the same index](https://discuss.elastic.co/t/different-size-in-bytes-for-the-same-index/290474)
**Author:** [@Saliinger](https://discuss.elastic.co/u/Saliinger)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 5:40pm UTC](https://discuss.elastic.co/t/different-size-in-bytes-for-the-same-index/290474 "2021-11-29T17:40:50Z")
Hello! :slight\_smile: I'm trying to get the size in bytes of an individual document for each index I have. I'm using Index stats to get that information dividing the size\_of bytes with docs (total docs count). For exa… --- ## [Kibana CSV report show '(empty)' word instead of empty value.](https://discuss.elastic.co/t/kibana-csv-report-show-empty-word-instead-of-empty-value/290375)
**Author:** [@Pitchaya\_Thipkham](https://discuss.elastic.co/u/Pitchaya_Thipkham)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 5:13pm UTC](https://discuss.elastic.co/t/kibana-csv-report-show-empty-word-instead-of-empty-value/290375 "2021-11-29T17:13:34Z")
Hi,I'm using kibana 7.15 and I've created a scripted field that return empty string \> "" Then I create a report and download it, My CSV report show "(empty)" words. How can I do if I want them to be empty value? I've tri… --- ## [Exec input](https://discuss.elastic.co/t/exec-input/290463)
**Author:** [@lnunez](https://discuss.elastic.co/u/lnunez)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 4:54pm UTC](https://discuss.elastic.co/t/exec-input/290463 "2021-11-29T16:54:47Z")
Hi everyone, Just to keep the consistency between the input, I realized that is not possible to just execute manually a pipeline with an exec input without a schedule definition. This is allowed using the JDBC input or … --- ## [Keystore is not possible used in a pipeline after enabling centralized managment](https://discuss.elastic.co/t/keystore-is-not-possible-used-in-a-pipeline-after-enabling-centralized-managment/288641)
**Author:** [@lnunez](https://discuss.elastic.co/u/lnunez)\ **Replies:** 2\ **Last updated:** [November 29, 2021, 4:33pm UTC](https://discuss.elastic.co/t/keystore-is-not-possible-used-in-a-pipeline-after-enabling-centralized-managment/288641 "2021-11-29T16:33:00Z")
Related with: if is enabled the centralized management pipeline, it will deactivated the path settings to be used in cmd, but some pipeline, could have some key-value from the keystore, and as is deactivated the "--pat… --- ## [Can elastic search used as :- along with view data as visualization, option to download those data shown on the dash board](https://discuss.elastic.co/t/can-elastic-search-used-as-along-with-view-data-as-visualization-option-to-download-those-data-shown-on-the-dash-board/290294)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 4:14pm UTC](https://discuss.elastic.co/t/can-elastic-search-used-as-along-with-view-data-as-visualization-option-to-download-those-data-shown-on-the-dash-board/290294 "2021-11-29T16:14:20Z")
Hi All, Good evening, it has been long time since I got an opportunity to use Elasticsearch, now I am trying to propose Elastic Search to (a) visualize the data (b) and providing options to download the visualized dat… --- ## [Hide a specific visualisation when a filter is introduced in dashboard](https://discuss.elastic.co/t/hide-a-specific-visualisation-when-a-filter-is-introduced-in-dashboard/290393)
**Author:** [@Mani5189](https://discuss.elastic.co/u/Mani5189)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 2:02pm UTC](https://discuss.elastic.co/t/hide-a-specific-visualisation-when-a-filter-is-introduced-in-dashboard/290393 "2021-11-29T14:02:53Z")
Hi, Lets say I have added 2 visualisation in a dashboard. line graph data table When i filter a value from data table, the line graph becomes empty. In this case, How to hide line graph completely ? --- ## [Unable to Tessellate shape](https://discuss.elastic.co/t/unable-to-tessellate-shape/290384)
**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\ **Replies:** 5\ **Last updated:** [November 29, 2021, 12:09pm UTC](https://discuss.elastic.co/t/unable-to-tessellate-shape/290384 "2021-11-29T12:09:59Z")
when i ingest geo\_shape data to ES, it shows this kind of error elasticsearch.helpers.errors.BulkIndexError: ('1 document(s) failed to index.', \[{'index': {'\_index': 'spx\_id\_station\_zone\_detail\_di\_test', '\_type': '\_doc'… --- ## [How to use offset in table metrics](https://discuss.elastic.co/t/how-to-use-offset-in-table-metrics/290432)
**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 11:54am UTC](https://discuss.elastic.co/t/how-to-use-offset-in-table-metrics/290432 "2021-11-29T11:54:56Z")
i want to get the count of current hour, the hour of yesterday and the hour of 7 days ago. Here is the table i need. how to set offset in input json? --- ## [Doc\_count value is mismatching when size is change](https://discuss.elastic.co/t/doc-count-value-is-mismatching-when-size-is-change/290053)
**Author:** [@nishar](https://discuss.elastic.co/u/nishar)\ **Replies:** 4\ **Last updated:** [November 29, 2021, 11:34am UTC](https://discuss.elastic.co/t/doc-count-value-is-mismatching-when-size-is-change/290053 "2021-11-29T11:34:09Z")
If we change size field in aggregations, doc\_count is mismatch. --- ## [Downgrade Elastic Search](https://discuss.elastic.co/t/downgrade-elastic-search/289286)
**Author:** [@Y\_MN](https://discuss.elastic.co/u/Y_MN)\ **Replies:** 8\ **Last updated:** [November 29, 2021, 11:03am UTC](https://discuss.elastic.co/t/downgrade-elastic-search/289286 "2021-11-29T11:03:48Z")
I need to upgrade ES from 7.10.2 to 7.14.1, and if something goes wrong, can I automatically roll back to the previous version? --- ## [Different .kibana\_\* indices After upgrading](https://discuss.elastic.co/t/different-kibana-indices-after-upgrading/289912)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 4\ **Last updated:** [November 29, 2021, 9:42am UTC](https://discuss.elastic.co/t/different-kibana-indices-after-upgrading/289912 "2021-11-29T09:42:30Z")
Upgrade ELK stack from 7.13 to 7.15 I checked /\_cat/indices/.kibana?v\* health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open .kiban… --- ## [Elasticserach not starting](https://discuss.elastic.co/t/elasticserach-not-starting/289965)
**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\ **Replies:** 8\ **Last updated:** [November 29, 2021, 9:38am UTC](https://discuss.elastic.co/t/elasticserach-not-starting/289965 "2021-11-29T09:38:50Z")
One of my Elasticsearch nodes stopped the service and moved the master to another node. The logs do not show much info, why but rather just say master moved to a different node. \[2021-11-23T13:57:21,216\]\[INFO \]\[o.e.n.N… --- ## [Bulk vs Single operations for 1 document](https://discuss.elastic.co/t/bulk-vs-single-operations-for-1-document/289522)
**Author:** [@LinHuiqing](https://discuss.elastic.co/u/LinHuiqing)\ **Replies:** 4\ **Last updated:** [November 29, 2021, 6:45am UTC](https://discuss.elastic.co/t/bulk-vs-single-operations-for-1-document/289522 "2021-11-29T06:45:09Z")
Hi, I understand that using bulk operations when there are many operations to be made brings performance benefits based on forums and documentation. However, how does a bulk operation with a single operation compare to s… --- ## ["include\_in\_root" option with wildcard field causes "illegal\_argument\_exception"](https://discuss.elastic.co/t/include-in-root-option-with-wildcard-field-causes-illegal-argument-exception/290353)
**Author:** [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\ **Replies:** 2\ **Last updated:** [November 29, 2021, 6:11am UTC](https://discuss.elastic.co/t/include-in-root-option-with-wildcard-field-causes-illegal-argument-exception/290353 "2021-11-29T06:11:43Z")
Hello, I tried to use "include\_in\_root" option with nesting wildcard field but got error. The Elasticsearch version is as follows: "version" : { "number" : "7.15.2", "build\_flavor" : "default", "build\_type… --- ## [Synonyms relevance help](https://discuss.elastic.co/t/synonyms-relevance-help/290172)
**Author:** [@sagarpatel](https://discuss.elastic.co/u/sagarpatel)\ **Replies:** 6\ **Last updated:** [November 29, 2021, 5:38am UTC](https://discuss.elastic.co/t/synonyms-relevance-help/290172 "2021-11-29T05:38:40Z")
HI, I am trying to configured synonyms in Elasticsearch and done the sample configuration as well. But not getting expected relevancy when i am searching data. Below is index Mapping configuration: PUT /test\_index { … --- ## [Reading data from MS-SQL](https://discuss.elastic.co/t/reading-data-from-ms-sql/290391)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 4:49am UTC](https://discuss.elastic.co/t/reading-data-from-ms-sql/290391 "2021-11-29T04:49:11Z")
Dear All, Good morning I am trying to configure ES Kibana to read the data from MS-SQL to the Kibana dashboard, on the option of "adding data", we can see the option of "Microsoft SQL Server Metrics " , this option gi… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=766) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=768)